1 Answer
1

I think you should change valid users = ashley joe %S to only valid users = %S. In your example, ashley, joe and %S [the name of the share] is always valid, so ashley and joe can reach all homes, any other (if there are) users should only see their own in the example you gave.